Length beats tricks
Every extra character multiplies the guessing work. A long password of plain letters beats a short one full of symbols.
Free tool
Free password generator
Need a password nobody can guess? Make a strong random password, or a passphrase of random words you can actually remember. It is made in your own browser and never sent to us or stored anywhere.
Made on your device with your browser’s secure random generator. Nothing is sent to WPfoss.
Passphrase words come from the EFF short word list by the Electronic Frontier Foundation, used under CC BY 3.0 US.
What makes a password strong
Truly random
People are predictable: names, dates, a capital first and a number last. A generator is not, which is the point.
One per account
When one site leaks, attackers try the same password everywhere else. A different password for each account stops that.
How to make a strong password you can remember →Questions about the password generator
Do you see or keep the passwords this makes?
No. The password is made by your own browser, on your device, and never leaves it. There is nothing on our server for this tool, so there is nothing to send and nothing to store.
How random is it?
It uses your browser’s built-in secure random number generator, the same one used for encryption, and picks every character in a way that does not favour any of them.
Password or passphrase: which should I use?
A passphrase of six random words is easier to type and remember, and just as hard to guess, so it suits the few passwords you must keep in your head. For everything else, use a long random password and let a password manager remember it.
How long should a password be?
At least 16 characters for a random password, or at least six random words for a passphrase. Length matters more than odd symbols.
Where should I keep the passwords it makes?
In a password manager, not a spreadsheet, a notebook or a chat. One strong passphrase opens the manager, and the manager holds the rest.
For your whole team
Strong passwords only help if your team can keep them.
WPfoss is the official heylogin partner for Africa. We roll heylogin out across your whole team, move the passwords sitting in spreadsheets and chat threads into it, and rotate the ones that leaked.